
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/ruXS7OCnHrYd29vqtP473qLD2CE.roa
File: ruXS7OCnHrYd29vqtP473qLD2CE.roa (raw, json)
Hash identifier: kgxEsdwNx9y4UTvzYtjnpbsbhXY6N6z/wSPf/ZrT+mE=
Subject key identifier: AE:E5:D2:EC:E0:A7:1E:B6:1D:DB:DB:EA:B4:FE:3B:DE:A2:C3:D8:21
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 0128
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/ruXS7OCnHrYd29vqtP473qLD2CE.roa
Signing time: Thu 24 Jul 2025 02:29:19 +0000
ROA not before: Thu 24 Jul 2025 02:29:19 +0000
ROA not after: Wed 15 Jul 2026 01:30:01 +0000
asID: 4694
IP address blocks: 210.250.192.0/19 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 18:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 296 (0x128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Jul 24 02:29:19 2025 GMT
Not After : Jul 15 01:30:01 2026 GMT
Subject: CN=AEE5D2ECE0A71EB61DDBDBEAB4FE3BDEA2C3D821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:42:7a:a4:1b:3f:3f:63:ef:df:10:d0:6e:95:
a4:bd:8e:16:3e:12:5d:bc:dc:b4:75:17:6f:ab:89:
b9:e7:8a:ad:94:db:e1:6b:92:af:c9:48:70:78:d5:
4f:55:87:e3:e0:38:87:f6:d5:07:0a:6b:40:15:79:
d4:38:04:39:5c:7b:f8:ee:ac:d1:31:d2:3f:41:22:
47:77:f8:a9:57:5f:8d:13:ab:dd:9e:9d:4b:fa:69:
3d:7b:eb:cc:21:c6:da:f6:71:c6:79:8e:92:2e:a8:
4b:0d:cb:57:81:5f:91:8b:90:2d:05:f9:7f:52:d2:
e5:be:54:f0:2f:40:eb:22:81:06:74:71:8c:fc:b5:
db:3c:62:89:d1:1a:d7:6c:e3:a7:6b:a5:65:c7:89:
35:59:b8:0c:e2:f0:e4:7f:7b:7b:87:65:23:ab:d1:
f4:32:76:63:ce:5a:ed:30:8a:50:ce:04:5b:78:5d:
56:32:25:fb:d8:f8:89:8b:35:16:0b:67:06:68:74:
13:92:16:be:b7:f9:38:8c:25:bd:c7:49:1e:f2:d2:
cc:8c:e5:08:cc:b6:9d:9d:09:a7:95:9c:86:8d:16:
92:d8:57:fe:e2:be:7c:88:49:40:0a:89:ce:d5:60:
be:86:78:03:20:68:d7:b1:92:4b:ed:22:49:6b:14:
dc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E5:D2:EC:E0:A7:1E:B6:1D:DB:DB:EA:B4:FE:3B:DE:A2:C3:D8:21
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/ruXS7OCnHrYd29vqtP473qLD2CE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.250.192.0/19
Signature Algorithm: sha256WithRSAEncryption
ba:b2:0b:c4:d1:1e:3a:72:48:fb:a1:3a:c1:91:eb:d9:56:23:
ab:2f:54:bf:ca:76:41:5c:04:c9:0d:cf:0c:f0:64:c3:46:7c:
dc:02:7e:f7:e3:b5:77:42:b5:b2:ce:81:56:3c:dd:15:8e:2d:
b9:79:2a:57:a2:a9:5b:7f:6b:e2:44:4f:53:40:3c:6e:36:7d:
09:f1:64:f0:83:da:75:12:2e:8a:06:72:c2:7a:b1:cf:1b:48:
a9:b9:29:5b:c1:7a:68:53:ed:06:8a:22:87:a5:0c:80:3d:98:
d0:b0:53:74:2c:ba:23:17:52:0f:c5:16:98:d4:d7:ca:c8:cd:
07:f7:44:28:6a:5a:ee:45:42:46:a0:19:de:b2:27:97:25:d9:
fd:1f:1b:a4:07:24:1a:d7:f1:e5:d8:b1:2f:f8:b7:93:6b:ec:
9c:f8:22:ac:f1:f1:65:93:eb:11:d8:b7:b8:d0:fd:a7:42:dc:
20:88:75:30:45:c1:56:de:47:34:a2:23:0c:63:2a:11:71:33:
83:13:1c:0b:3d:c7:93:44:6a:44:78:36:bf:dd:a3:c9:59:80:
6f:0d:ed:91:3a:a6:92:30:ad:8f:3c:b5:2d:1f:2a:df:7b:5b:
95:de:54:5c:59:08:9e:59:80:ce:48:f8:de:56:19:6b:66:61:
22:62:81:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:53:30 2025 by rpki-client